openldap“没有全球高级知识" [英] openldap "no global superior knowledge"
问题描述
当我:
ldapadd -f pop01.ldif -x -D "cn=Manager,dc=ldap,dc=beonegroup,dc=be" -w 1234
我得到:
adding new entry "dc=ldap,dc=beonegroup,dc=org"
ldapadd: Server is unwilling to perform (53)
additional info: no global superior knowledge
这是我的slapd.conf:
Here is my slapd.conf:
database bdb
suffix "dc=ldap,dc=beonegroup,dc=be"
rootdn "cn=Manager,dc=ldap,dc=beonegroup,dc=be"
rootpw 1234
directory /var/lib/ldap/beoneDirectory
index objectClass eq,pres
index ou,cn,mail,surname,givenname eq,pres,sub
index uidNumber,gidNumber,loginShell eq,pres
index uid,memberUid eq,pres,sub
index nisMapName,nisMapEntry eq,pres,sub
我的文件曾用于填充:
[root@local beoneDirectory]# pwd
/var/lib/ldap/beoneDirectory
[root@local beoneDirectory]# cat pop01.ldif
dn: dc=ldap,dc=beone,dc=org
objectClass: top
objectClass: dcObject
objectClass: organization
dc: beone
o: beone
description: ldap.beone.be
dn: o=beone
objectClass: top
objectClass: organization
o: beone
description: Beone
dn: cn=Manager,o=beone
objectClass: organizationalRole
cn: Manager
description: LDAP Directory Administrator
dn: ou=Employes,o=beone
ou: Employes
objectClass: top
objectClass: organizationalUnit
description: Employes beone
dn: ou=Clients,o=beone
ou: Clients
objectClass: top
objectClass: organizationalUnit
description: Clients beone
#1ere entrée
dn: cn=Benoit Le,ou=Employes,o=beonegroup
cn: Benoit Le
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
mail: benoit@beone.be
givenname: Benoit
sn: Lecomte
ou: Employes
street: 29 rue de cp
l: jumet
postalCode: 6040
telephoneNumber: 04942311
mobile: 01234345
#2eme employé
dn: cn=Matteo Di,ou=Employes,o=beonegroup
cn: Matteo Di
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
mail: mat@beone.be
d d d d d d d d d d d d d d
d d d d d d d d d d d d d d
我知道这是一个与slapd.conf相关的问题,openldap不知道在何处插入我的条目,但我真的不知道如何指定它
I know this is a slapd.conf related issue, openldap doesn't know where to insert my entries but I don't really see how to specify it
推荐答案
您的数据库已命名(有后缀):
Your database is named (has suffix):
dc=ldap,dc=beonegroup,dc=be
您正在ldif中尝试向
You are in the ldif trying to add stuff to
dn: dc=ldap,dc=beone,dc=org
这在某种程度上等同于创建一个名为/something
的目录,然后尝试创建文件/some/file
.由于目录/some
不存在,因此无法使用.
This is somewhat equivalent of makeing a directory called /something
, then trying to create the file /some/file
. It won't work since the directory /some
doesn't exist.
记住LDAP数据是以分层结构组织的,即像目录和文件一样的树形形式.单词 superior 表示上面的级别(更接近顶部),类似于文件系统示例中的父目录(更接近根目录).
Remember LDAP data is organized in a hierarchical structure, i.e. the form of a tree like directories and files are. The word superior refers to the level above (closer to top), similar to parent directory (closer to root) in the filesystem example.
在文件系统中,您会收到错误消息/some/file: No such file or directory
In the filesystem you would get the error message /some/file: No such file or directory
LDAP错误的措词可能更好.
The LDAP error could probably have been worded better.
这篇关于openldap“没有全球高级知识"的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!